You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airavata.apache.org by sh...@apache.org on 2015/03/19 20:11:40 UTC
[22/50] [abbrv] airavata git commit: introducing support of myproxy
and server generated identity mechanisms, work is still under development
introducing support of myproxy and server generated identity mechanisms,
work is still under development
Project: http://git-wip-us.apache.org/repos/asf/airavata/repo
Commit: http://git-wip-us.apache.org/repos/asf/airavata/commit/8d3b1374
Tree: http://git-wip-us.apache.org/repos/asf/airavata/tree/8d3b1374
Diff: http://git-wip-us.apache.org/repos/asf/airavata/diff/8d3b1374
Branch: refs/heads/new-workflow-design
Commit: 8d3b1374a9ab65f3e9dcceb8cfb4e32391c1c39f
Parents: 34b06cc
Author: msmemon <sh...@gmail.com>
Authored: Tue Mar 10 16:49:25 2015 +0100
Committer: msmemon <sh...@gmail.com>
Committed: Tue Mar 10 16:49:25 2015 +0100
----------------------------------------------------------------------
.../computeResourceModel.thrift | 23 +++++++++++++++++++-
1 file changed, 22 insertions(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/airavata/blob/8d3b1374/airavata-api/thrift-interface-descriptions/computeResourceModel.thrift
----------------------------------------------------------------------
diff --git a/airavata-api/thrift-interface-descriptions/computeResourceModel.thrift b/airavata-api/thrift-interface-descriptions/computeResourceModel.thrift
index cb924e9..8e89908 100644
--- a/airavata-api/thrift-interface-descriptions/computeResourceModel.thrift
+++ b/airavata-api/thrift-interface-descriptions/computeResourceModel.thrift
@@ -333,14 +333,35 @@ struct GlobusJobSubmission {
*
* unicoreEndPointURL:
* unicoreGateway End Point. The provider will query this service to fetch required service end points.
+ * authenticationMode
+ * The authenticationMode defines the way certificate is fetched.
+ * userDN
+ * This attribute captures the userDN used for launching jobs and create temporary storages. The attribute should be
+ * provided if the authentication mode is set as SERVER_ISSUED.
*/
struct UnicoreJobSubmission {
1: required string jobSubmissionInterfaceId = DEFAULT_ID,
2: required SecurityProtocol securityProtocol,
- 3: required string unicoreEndPointURL
+ 3: required string unicoreEndPointURL,
+ 4: required AuthenticationMode authenticationMode,
+ 5: optional string userDN
}
/**
+ * AuthenticationMode
+ *
+ * SERVER_ISSUED: use CA credentials to generate a certificate based on user name.
+ * server properties.
+ * MYPROXY_ISSUED: rely on GSI method implementation already provided
+ * by Airavata security libs.
+*/
+enum AuthenticationMode {
+ SERVER_ISSUED,
+ MYPROXY_ISSUED
+}
+
+
+/**
* Provider name
**/
enum ProviderName {